Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
File: Z31OosAWzieXr3rrc30TKHVmnxI.mft (raw, json)
Hash identifier: Lv87kUwYoq75SEHEDEbbgMfMSOwDAnAHHd1b1EfpIIg=
Subject key identifier: 7B:14:F2:0A:6C:55:BC:E6:0B:9F:0B:D6:FF:22:FC:E7:1F:20:F7:79
Authority key identifier: 67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
Certificate issuer: /CN=677d4ea2c016ce2797af7aeb737d132875669f12
Certificate serial: 019356F6D58043513355FB9A1038FF986973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
Manifest number: 0880
Signing time: Sat 23 Nov 2024 03:00:37 +0000
Manifest this update: Sat 23 Nov 2024 03:00:37 +0000
Manifest next update: Sun 24 Nov 2024 03:00:37 +0000
Files and hashes: 1: JSJ_T63GmXSXVSn4cFD5uEtdvPI.roa (hash: 9jnNfW04eJrxDJ3SrL2Rl7ukydzfqlzatiA/Sq+sjL8=)
2: Z31OosAWzieXr3rrc30TKHVmnxI.crl (hash: XqDhmexrjmlUTfb85iR7e4V5xsGmu3T9G49Uqudaz40=)
3: yOm-lqxsbYHPC5FqAmGNQZcOWEM.roa (hash: qShkZG7AwEJI+B/A9+0Qumc32Gn//Yqvj6y5W/CuCds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f6:d5:80:43:51:33:55:fb:9a:10:38:ff:98:69:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677d4ea2c016ce2797af7aeb737d132875669f12
Validity
Not Before: Nov 23 03:00:37 2024 GMT
Not After : Nov 24 03:00:37 2024 GMT
Subject: CN=7b14f20a6c55bce60b9f0bd6ff22fce71f20f779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f1:2b:fd:e8:9a:8f:f8:5c:f3:c3:6d:9d:bc:
19:64:06:ee:4c:04:df:e8:33:d2:0a:44:08:3c:8e:
b9:a4:1f:8b:b6:fe:b4:d2:63:b1:25:9e:23:e9:83:
de:38:3f:d6:49:bb:92:55:81:83:d5:c1:50:ad:51:
a8:2b:f2:2b:44:01:49:45:b0:b3:ff:46:63:5a:08:
46:c2:8a:91:4d:a1:3f:f9:1f:62:84:71:d0:d2:45:
26:1b:b3:96:a0:86:b7:9e:d6:38:46:f5:e6:85:5d:
0a:68:7f:e8:0a:eb:98:ef:94:1d:ec:a0:29:d9:f3:
7e:54:25:33:6f:34:38:fb:96:25:35:3f:95:0d:72:
0a:ee:c3:14:3a:50:c6:c6:0e:ac:b8:b4:d3:a7:31:
d9:7b:72:17:09:18:6c:b0:3d:1a:fd:d1:9b:27:f8:
4a:a2:f8:3d:df:d3:05:f2:f6:32:a2:ce:14:b6:72:
cb:b8:85:75:81:c3:c2:ce:85:e1:61:c9:a9:19:54:
e9:df:fd:ad:25:20:02:80:64:32:28:f4:ab:3e:ee:
54:0b:b3:b5:17:fb:04:17:ea:f2:13:4e:fc:17:c8:
3a:dd:bf:1d:78:0b:0a:b1:09:d3:46:ba:0b:1e:f4:
09:0c:97:bf:3e:99:b6:a7:89:55:33:82:9a:42:d5:
40:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:14:F2:0A:6C:55:BC:E6:0B:9F:0B:D6:FF:22:FC:E7:1F:20:F7:79
X509v3 Authority Key Identifier:
keyid:67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:0a:d1:5b:26:6f:f3:0d:ae:79:df:a2:ba:74:96:ed:b8:b7:
3f:f0:5c:23:2a:b1:45:da:d5:24:15:cd:18:46:54:d1:af:3f:
ae:41:70:98:18:cd:c3:8d:15:cc:68:77:af:5d:39:04:53:d5:
71:31:af:6b:45:ea:ad:15:0f:eb:fb:9d:6c:5d:ad:a3:05:d8:
5b:85:38:92:80:1a:e0:02:2f:03:f3:1a:ca:17:d3:40:03:80:
8d:4c:5c:6f:55:11:7e:0f:c3:c4:f3:18:60:42:5e:a6:97:10:
6b:77:09:f5:74:be:5e:31:85:df:ba:eb:03:04:89:89:d5:90:
07:80:16:80:60:49:2e:9c:57:fc:58:08:09:c0:df:bd:6e:67:
16:1f:60:40:97:cc:bf:4a:e1:30:fa:39:aa:aa:7c:24:a1:6a:
b9:f6:2a:d6:76:13:85:bf:9a:c1:f1:c2:55:6c:60:0e:47:ec:
57:32:9b:e3:ba:13:e1:e9:24:38:3f:95:05:68:22:8a:40:fe:
c6:36:72:ec:11:f7:e1:cc:99:0f:07:ce:1c:a0:f3:cc:63:39:
4d:4f:ed:5a:82:23:6f:fd:a8:d6:65:03:b8:65:2c:2c:bd:ba:
10:52:a1:54:34:ff:18:e7:ab:2c:6d:de:c2:2a:95:0f:b6:6f:
cc:fb:65:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:50 2024 by rpki-client on console-ams.rpki-client.org